diff options
| author | Xavier Morel <xmo@odoo.com> | 2018-07-12 10:04:21 +0200 |
|---|---|---|
| committer | Xavier Morel <xmo@odoo.com> | 2018-07-13 17:31:22 +0200 |
| commit | ccbfa94d32158b8df383df54f3eced38e602e5ef (patch) | |
| tree | cd64e99d87407736b779b443907ea85adb293747 /addons/web | |
| parent | 0bb5268cb31aa1944de86724b7ae36e15a7c2d80 (diff) | |
[FIX] the ; in content-disposition is a separator not a terminator
According to RFC 6266,
content-disposition = "Content-Disposition" ":"
disposition-type *( ";" disposition-parm )
disposition-parm can't be an empty string, and thus a ; in terminal
position is not legal, even though browsers apparently work around it.
Diffstat (limited to 'addons/web')
| -rw-r--r-- | addons/web/controllers/pivot.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/web/controllers/pivot.py b/addons/web/controllers/pivot.py index 3aebfe3946b..e2ffbfbaa31 100644 --- a/addons/web/controllers/pivot.py +++ b/addons/web/controllers/pivot.py @@ -81,7 +81,7 @@ class TableExporter(http.Controller): response = request.make_response(None, headers=[('Content-Type', 'application/vnd.ms-excel'), - ('Content-Disposition', 'attachment; filename=table.xls;')], + ('Content-Disposition', 'attachment; filename=table.xls')], cookies={'fileToken': token}) workbook.save(response.stream) |